Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: WUbFY7bMokfN9ZwVPdFCiehKZi/6/2AQAtnLCBiyRAs=
Subject key identifier: 69:DB:AF:25:BB:1F:27:08:13:B0:79:9C:F5:3E:B7:F5:D7:15:9C:24
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019E31BC2AAE6E44630BFEDE3A0E7DA647CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 101D
Signing time: Sat 16 May 2026 17:01:15 +0000
Manifest this update: Sat 16 May 2026 17:01:15 +0000
Manifest next update: Sun 17 May 2026 17:01:15 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: ldzMeTE3h5r5pATu4UP7Jc/ckRbcBH91DHLz6yl6w70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:2a:ae:6e:44:63:0b:fe:de:3a:0e:7d:a6:47:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: May 16 17:01:15 2026 GMT
Not After : May 17 17:01:15 2026 GMT
Subject: CN=69dbaf25bb1f270813b0799cf53eb7f5d7159c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:57:c0:f9:61:95:22:3c:76:63:ee:15:68:7e:
13:9a:0f:b6:e9:fd:45:37:96:d2:bc:24:67:e6:d0:
17:7d:06:01:41:4a:86:d5:9d:df:98:5e:bc:d5:1b:
91:63:ea:9f:6e:96:37:91:a9:97:24:3f:0f:57:29:
df:d0:7e:d1:91:69:80:8c:b0:e1:f5:c1:c4:b5:06:
f0:a1:af:f6:98:4a:fb:73:c7:07:b6:1c:e5:44:8a:
83:dc:06:67:46:93:4c:a9:89:e0:1f:8d:cd:1f:9b:
d2:25:67:90:c6:68:b8:38:07:ae:4b:e1:93:91:ac:
93:18:08:2b:77:97:82:5d:07:72:6a:aa:f2:24:e1:
ac:0a:bc:a0:5d:6e:1f:ad:bb:75:25:2b:ae:99:71:
09:4b:28:f4:5f:cc:d9:5e:08:3f:23:f2:41:08:39:
b9:65:b7:21:ab:a1:84:c4:70:62:30:0f:92:f0:e0:
b4:ff:c2:90:5f:ff:59:bc:d2:82:ad:41:cc:1c:6f:
31:9d:eb:7d:5c:40:f4:a8:aa:0c:cc:9a:9f:f6:4f:
c4:cd:99:53:0c:49:51:61:ad:4b:3f:48:dd:29:de:
b1:68:c1:c8:4d:d4:59:71:c0:9e:3a:89:16:40:1c:
42:78:62:b1:db:5f:94:00:6c:fb:11:d4:5e:d4:c0:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DB:AF:25:BB:1F:27:08:13:B0:79:9C:F5:3E:B7:F5:D7:15:9C:24
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1b:56:cf:31:78:57:47:9b:75:ef:4e:c6:d9:2f:5a:22:19:
32:51:5b:04:ca:e9:9f:69:79:6b:fc:c7:50:1e:88:36:12:c5:
95:1b:32:f4:c4:af:71:d3:11:e4:78:e7:67:cf:2a:f1:14:c6:
ba:8e:1d:03:94:e6:69:55:29:2a:5f:23:c1:63:d2:d7:f2:b9:
3a:13:c1:5a:9e:87:d1:50:4f:ff:0c:1e:3e:9a:00:45:d4:5c:
93:30:9b:ac:92:69:2b:89:49:a4:f3:bf:3f:d2:ad:77:ea:70:
98:31:26:52:ef:59:6d:29:38:81:ec:8c:b3:90:b6:3d:34:ba:
4b:dd:a1:9e:a1:8d:80:72:b5:4e:a2:33:c1:1e:34:7d:5a:7b:
ef:15:4f:e6:00:59:35:10:de:48:ee:9e:ad:40:2e:0e:30:77:
7c:37:43:7c:6c:0b:75:bd:70:a8:df:9e:35:25:73:3e:c5:55:
79:f7:42:5e:19:8d:5f:0a:23:4b:ee:bc:35:ed:e5:1b:ed:25:
24:ec:b1:7e:64:b9:e3:6a:0d:24:c6:13:d3:d0:2d:46:eb:5f:
ff:bd:34:92:4a:32:e7:37:91:b5:2f:1a:0e:d2:1f:f2:be:5b:
96:c1:a1:c1:2f:b7:7f:19:ea:57:cd:6e:96:5a:e9:04:b8:9d:
b0:f4:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:42 2026 by rpki-client